From 9871a39409222a80b4c4c22cbaab17bae84f1712 Mon Sep 17 00:00:00 2001
From: Eric Biggers <ebiggers@google.com>
Date: Wed, 23 Feb 2022 12:35:04 -0800
Subject: pam_fscrypt: log errors getting protector in policiesUsingProtector()

If the error is anything other than ErrNotSetup, it might be helpful to
know what is going on.
---
 pam_fscrypt/run_fscrypt.go | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'pam_fscrypt')

diff --git a/pam_fscrypt/run_fscrypt.go b/pam_fscrypt/run_fscrypt.go
index 8c640ce..a563ab5 100644
--- a/pam_fscrypt/run_fscrypt.go
+++ b/pam_fscrypt/run_fscrypt.go
@@ -173,6 +173,9 @@ func policiesUsingProtector(protector *actions.Protector) []*actions.Policy {
 		// Skip mountpoints that do not use the protector.
 		if _, _, err := mount.GetProtector(protector.Descriptor(),
 			protector.Context.TrustedUser); err != nil {
+			if _, ok := err.(*filesystem.ErrNotSetup); !ok {
+				log.Print(err)
+			}
 			continue
 		}
 		policyDescriptors, err := mount.ListPolicies(protector.Context.TrustedUser)
-- 
cgit v1.2.3